Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Anti-Virus.You log does not show an anti-virus program installed - this leaves your PC at increased risk of infection.
There are a couple of free anti-virus programs available.
AVG 7: Available here.Avast: Available here.

While you can download both to see which one you prefer, only install one at a time - running two or more anti-virus programs simultaneously can cause conflicts resulting in less, not more, protection.

Firewall

Your log doesn't show a firewall installed - this also leaves your PC at increased risk of infection.
If you are using the firewall that comes with Service Pack 2, you should replace it. It doesn't monitor outgoing traffic, so anything malicious on your computer can 'phone home' at will.
There are a couple of free firewalls available.
Zone Alarm: Available here.Sygate: Available here.

Again, while you can download both to see which one you prefer, only install one at a time - running two or more firewalls simultaneously can cause conflicts resulting in less, not more, protection.

You will need to make a copy of these instructions because you have to disconnect from the internet to complete the fix. Either print them out or 'Copy and Paste' them into Notepad.

Preparation

1) Download VundoFix.exe from here and save it to your Desktop.
Double click VundoFix.exe to extract the files.
In the 'VundoFix Setup' window, click on Install and then Close - This will create a folder called VundoFix on your Desktop.

IMPORTANTIf you already have a copy of VundoFix on your PC, please delete it and download a new copy. This file may have been updated since you downloaded your copy.

2) You will need to know how to boot into Safe Mode.
Instructions can be found here.

3) Log off from the internet and disconnect your modem cable.

IMPORTANTSome real-time protection programs may warn you of a possibly malicious script being detected when you run VundoFix. Please allow it to run - it is necessary to complete the fix. Alternatively, disable any script blocking software you have running before you start.

Removal

1) Boot into Safe Mode.

2) Open the VundoFix folder and double click on KillVundo.bat

3) You will first see:

VundoFix V2.15 by AtriBy using VundoFix you agree that you are doing so at your own riskPress enter to continue....

Press <ENTER> to continue with the fix.

4) Next you will see:

Please Type in the filepath as instructed by the forum staffand then press enter:

Please type the following file path, making sure to enter it exactly as below:

C:\WINDOWS\system32\ddcyx.dll

Press <ENTER> to continue with the fix.

5) Next you will see:

Please type in the second filepath as instructed by the forumstaff then press enter:

Please type the following file path, making sure to enter it exactly as below:

C:\WINDOWS\system32\xycdd.*

Press <ENTER> to continue with the fix.

6) The fix will run then HijackThis will open - if it does not open automatically, you will need to open it yourself.
Place a checkmark in the boxes to the left of the following entries, by clicking on them:

CLOSE ALL OPEN WINDOWS AND BROWSERS - EXCEPT HJT and click on Fix checked

As long as all goes well with the above, run your PC as normal for a few days. When you are happy that everything is fine, do the following:

Update your anti-virus program,
Disable System Restore,
Boot into Safe Mode,
Scan your computer for viruses.
When you get the all clear, reboot into Normal Mode.
Re-enable System Restore,
Create a Restore Point.
This will give a clean Restore Point should you need it in the future.
A tutorial for System Restore is available here.

The reason for waiting is that if removing the malware has caused a problem, which it occasionally does, you can put your PC back to how it was before the fix. This will re-install the malware, but an infected PC is better than an expensive paperweight!

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.